PRIVACY POLICY

Effective Date: December 15, 2025 Version: 1.3

1. INTRODUCTION

OneClick AI Solutions s.r.o. ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy (hereinafter referred to as the "Policy") explains how we collect, use, share, and protect your personal data when you use our services at www.leezatko.ai (hereinafter referred to as the "Service").

This Policy is in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and relevant legal regulations of the Czech Republic.

By using the Service, you confirm that you have read this Policy. This Policy forms an integral part of our Terms of Service:

Terms and Conditions

2. DATA CONTROLLER

The controller of your personal data is:

OneClick AI Solutions s.r.o. with its registered office at Sokolovská 428/130, Karlín, 186 00 Prague 8 ID No. (IČO): 23948353 Tax ID (DIČ): CZ23948353 registered with the Municipal Court in Prague under file no. C 435717

Contact for privacy matters: support@leezatko.ai

Data Protection Officer (DPO) Statement: The Company has not appointed a Data Protection Officer (DPO), as we do not conduct large-scale processing of special categories of data that would require this obligation.

3. WHAT DATA WE COLLECT

We process the following categories of data:

A. Data provided by you

Registration Data: Email address, password (stored in encrypted form), nickname, date of birth (to verify age 18+).
User Content: Text prompts, chat conversations with AI Characters, AI Character preference settings (appearance, voice, personality), uploaded images, or voice inputs.
Communication: Data from your communication with our support team (emails, bug reports).

B. Automatically collected data

Technical Data: IP address, browser type, operating system, time zone, access logs.
Usage Data: How you interact with the Service, session duration, generation history, token status.
Analytics Tools: We use Google Analytics 4 to analyze traffic and user behavior.
Cookies: More information can be found in our Cookie Policy:
- Cookie Policy

C. Payment Data

To process payments, we use secure third-party payment gateways: Finby (for cards and subscriptions) and CoinGate (for cryptocurrencies). We ourselves do not store your full payment card numbers or private keys of crypto wallets. We only retain necessary transactional data (payment ID, date, amount, method type, last 4 digits of the card for identification in case of a claim).

4. PURPOSES AND LEGAL BASIS FOR PROCESSING

We process your data for the following purposes:

Purpose of Processing	Legal Basis
Provision of Service: Account creation, enabling AI chat, content generation, token management.	Performance of Contract
Payments and Billing: Subscription processing, issuing tax documents.	Performance of Contract / Legal Obligation
Security and Moderation: Fraud detection, prevention of illegal content (CSAM), ensuring platform security.	Legitimate Interest / Legal Obligation
Service Improvement and AI Training: Analysis of anonymized interactions to improve models and fix bugs.	Legitimate Interest
Marketing: Sending newsletters (only if you have consented or are a customer).	Consent / Legitimate Interest
Legal Compliance: Bookkeeping, dispute resolution, responding to authority requests.	Legal Obligation

4.1. Automated Decision Making and Profiling When providing the Service, we use automated processing (profiling) to personalize AI Character responses according to your preferences. Furthermore, we use automated tools to detect prohibited content. In the event of detection of a serious violation of terms (e.g., CSAM), automatic account blocking may occur. You always have the right to object to such a decision and request a human review at support@leezatko.ai.

5. ACCESS TO DATA AND SHARING WITH THIRD PARTIES

5.1. Human Review: We want to assure you that your conversations with AI Characters are private. Our employees or contractors do not have regular access to them. Access to content occurs exclusively in the following specific cases:

If you report the content yourself as erroneous or objectionable.
If our automated security filters flag the content as high-risk (e.g., suspected child abuse, terrorism, or extreme violence). In such a case, a vetted moderator will review only the necessary section of the conversation to verify compliance with our Policies.

5.2. Sharing with Partners: We share your data only to the necessary extent with vetted partners who meet strict security standards (SOC 2, GDPR):

AI Technology Providers (Processors):
- Anthropic (Claude): For processing text conversations (chat).
- ElevenLabs: For generating voice outputs and calls.
- Google (Gemini): For generating AI portraits.
- EternalAI: For image editing and video generation.
- Note: Text or image inputs (prompts) are sent to these services. Data is used primarily to generate a response and is not used by these partners to train their models on your personal data (according to their Enterprise terms).
Infrastructure and Database:
- Vercel: Hosting of the web application.
- Supabase: User authentication and secure database storage (PostgreSQL). Data is stored encrypted.
Payment Gateways:
- Finby: For card payment processing and subscription management.
- CoinGate: For cryptocurrency payments.
Analytics:
- Google Analytics 4: For traffic analysis (in anonymized form).
In case of suspected criminal activity (especially regarding CSAM or terrorism), we are obliged to hand over data to law enforcement agencies.

6. INTERNATIONAL DATA TRANSFER

Our infrastructure is hosted primarily on servers in secure data centers (Vercel, Supabase). Due to the use of global AI providers (e.g., Anthropic, Google), some data (especially inputs for AI models) may be processed on servers outside the European Economic Area (EEA), particularly in the USA. We ensure that these partners meet GDPR requirements through Standard Contractual Clauses (SCCs) or Data Privacy Framework certification.

7. DATA RETENTION

We retain your data only for as long as necessary:

Account and Content: For the duration of your account. After account deletion, we may retain data for another 30 days for recovery or technical backup purposes.
Accounting Documents: Under Czech VAT law, we must retain billing data for 10 years.
Logs and Technical Data: Usually deleted after 30–90 days.
Anonymized Data: Data that has been stripped of all identifiers (for model training) may be retained indefinitely.

8. YOUR RIGHTS

Under GDPR, you have the following rights:

Right of Access: To request a copy of the data we hold about you.
Right to Rectification: If the data is inaccurate.
Right to Erasure (Right to be Forgotten): You can request the deletion of your account and data if there is no legal reason for their further retention (e.g., billing).
Right to Restriction of Processing and Objection.
Right to Data Portability.

You can exercise your rights by emailing support@leezatko.ai. You also have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).

9. CHILD PROTECTION

Our Service is strictly intended only for persons over 18 years of age. We do not knowingly collect data from persons under 18 years of age. If we discover that a minor has registered with us, we will immediately delete their account and all data. More information:

Underage Policy

10. CHANGES TO THIS POLICY

We may update this Policy from time to time. We will inform you of material changes by email or a notification within the Service.

Contact: OneClick AI Solutions s.r.o. Email: support@leezatko.ai